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REMARKS 

Tilhe Examiner rejected portions of the disclosure and the title. This amendment 
corrects those areas. 

The new claims presented herein include more detail to distinguish the cited ref- 
erences. I These new claims add no new matter. 

The Examiners rejected claims 1, 3, 5, 1 1 and 13 under 35 112, second paragraph, 
citing inciefiniteness. The new claims have been reviewed to ensure that these types of 

errors atje not present 

i 

the Examiner rejected claims 1, 3 and 13 under 35 USC 102(e) citing U.S. pat. 

no. 6,10*8,420 to Larose et ah (Larose), The remaining claims were rejected under 35 

I 

USC 10'l3(a) using Larose as the primary reference and U.S, patents no. 6,240,513 to 

Friedman et ah (Friedman) and then U.S. pat. no 6,026,166 to LeBourgeois (LeBottr- 

i 

geois). j 

i 

A new set of claims is presented in this amendment, but the Examiner's finding in 
the office action are instructive. On page 5, paragraph 13, the Examiner determined that 
"Larosjj is silent on the matter of encrypting the software product using the first value. 
Later hij the same paragraph the Examiner determined that "using keys that are derived 
from device/system parameters are commonly implemented in the art." The Examiner 
used Larose as anticipating the claims that did not have the computer parameters cited as 
a source of a key, and Larose and Friedman as suggesting the claims that had the com- 
puter parameters, and Laxose, Friedman and Lebourgeois as suggesting the claims con- 
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taining a:"quorum " As a general comment (more detail follows) these prior art refer- 
ences alii require the u$e of PPK's (Public/Private Keys). Larose states this requirement 
directly, Friedman also generates PPK's and LeBourgeous's signatures are based on 
PPK's, and the only reasonable way of combining them includes use of these PPK's. As 
such all of these prior art patents require the transfer or sendingof at least a public key, 
and sucti a transfer is a weakness acknowledged (see below) in Larose, that is not found 
in the present claims as now amended. 

The following will discuss the new claims with respect to Larose, Friedman and 
LeBourgeois in more detail with respect to the present claims. 

New claim 16 includes these limitations: 

; encrypting, at the server computer, the software product using the 
jingle value as an encryption key, 



decrypting the encrypted software application by using the single 

i?alue as the decryption key. 

i 
i 

Also in claim 16, the single value itself is encrypted and decrypted using 

i 

the identical members of a set of parameters, as follows: 

Encrypting, at the server computer, the single value by using members of 
the fir s§ set of parameters as encryption keys, and„. 

decrypting members of the set of encrypted single values using members of the 
second ket of parameters as decryption keys 
\ 

■please note that the present invention, as now claimed, uses the single value to 
encrypt and to decrypt the software application. This defines a symmetric encryption key 
as contrasted to the PPK (private/public key). New claim 16 also contains another sym- 
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1 
i 

metric encryption key using the parameters to encrypt and to decrypt In contrast, Larose 
describe^ a system that requires the use of PPK at col 7> lines 12-29; 

i) ...the production of a cryptographic fingerprint..., and 
iijproteciion of that cryptographic fingerprint by encrypting it with a pri- 
vate key that the recipient of the fingerprint may, by using a public key 
hnd cryptographic algorithm, verify that the data is intact... . These two 
bteps are essential to realize that advantages of the present invention, 
l ?ince without both steps a third party may intervene and alter data with- 
out the recipient being able to detect it. 

These "private" and "public" keys are created by using "Public-Private Key 
(PPK) encryption algorithms" as discussed throughout Larose (e,g-, see Larose Column 7 
lines 41 j Column 7 lines 34 - Column S lines 27, Fig. 2, "public/Private key pairs' 5 150, 
and in Fjigs. 3a, 3b, and 3c; the "PPK encryption algorithms" 113, "public key" 152, and 
the "private key" 151). Therefore, the elements in the claims of the present invention, 
which disclose processes for using symmetric keys, tiiat are created from information 
collected from the installation computer, are not found or suggested in Larose. 

The excerpt above from Larose requires the use of PPK' s, where a public key 
must beijtransferred unencrypted to a user to verify a digital signature, Larose acknowl- 
edges tbat the unencrypted public key is a security risk, see Larose col. 13, lines 59-64. 
The present invention advantageously uses symmetric keys. Moreover, with respect to 
transferring keys as is necessary in the cited prior art, the parameters from which the keys 
are developed, but not the keys themselves, are only transferred in the present claims. 

j^urtaennore, Larose is silent on elements of claims 26, 28, and 30: of generating 
a second set of parameters and comparing this second set with a first set before the soft- 

'c 

ware prpduct is downloaded, and then authorizing the starting of a download, and does 
not dispose the following element of claims 21 and 33: requesting access to the en~ 
cryptea%software product at the computer, and in response thereto, generating a second 
set of data from the computer, among other elements in these claims. 

Similarly, Larose is silent on elements of claim 33: 
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moving said software product to a second computer, 

requesting access to the software product, and in response thereto, 

generating a first set of parameters from the second computer, and 

not authorizing the execution of the software product on the second 

computer, 

Larose, Combined with Friedman, does not anticipate or suggest the new claims. 

Sjince Larose requires and only discloses the use of PPK's, any other secondary 
reference that may be joined to Larose must retain that PPK use, or, the secondary refer- 
ence will be contrary to Larose' s teachings. With this in mind and that the present claims 
are limited to symmetric keys f Larose is distinguished. Larose should be completely 
removed as a reference. 

It then follows that Friedman and/or Lebourgeois cannot be combined with 
Larose to suggest the present invention as now claimed. 

I 

Friedman, as primary reference, does not anticipate or suggest the new claims* 

i 

Considering Friedman as the primary reference does not help. 

^riedman is also reliant upon the use of PPK's. The first 2 keys created, from a 

total of 6, are static and dynamic private keys , both generated when Friedman's security 

■i 

device i*» turned on. (Friedman Column 10 lines 21-22 and see Fig. 4a item 400). The 

Static private key, which is not a symmetric key, is created from a "seed" from the secu- 
rity device (as opposed to the client host, see Column 10 hues 27-33 and Fig. 4a item 400 
vs. item; 404). The dynamic private key is then randomly generated and derived from 
seeds obtained from seconds, minutes, etc. The static and dynamic public keys are then 
generated from thes e private keys from the equation on Column 10 line 63. When the 

cuted by which the two devices (i) exchange static public keys (unencrypted)." 
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llhis required usage of PPK, and the subsequent exchange of public keys between 
the secinjity devices, is the enabling basis for all subsequent operations necessary for the 
operation of the Friedman invention (see Friedman Column 11 lines 5-6, also Fig. 8 Steps 
836, and* Column 9 lines 26-28) and is in contrast with the present invention — which is 
not reliant upon PPK, and an exchange of public keys, to create and utilize symmetric 
keys. 

i 

Also, Friedman does not generate parameters from the installation computer nor 
does he send such collected information to a sever computer, nor does he create a sym- 
metric key from this information, is silent on encrypting/decrypting software products, on 
"streaming data," and on authorizing access to the software product at the user 's com- 
puter, requesting access to the encrypted software product at the computer, and in re- 
sponse diereto, generating a second set of data from the computer, authorizing the exe- 
cution of the software product on the computer. Therefore, Friedman does not disclose 
the relevant claim elements of claims 1 6-20 and claim 23. 

t 
I 
I 

In addition, Friedman is silent on elements of claims 21: generating a second set 
of paraineters and comparing this second $et with a first set before the software product is 

downloaded, and then authorizing the starting of a download. 

■I 
■i 

Similarly, Friedman is silent on elements of claim 24: moving said software prod- 
uct to ctijsecond computer, and requesting access to the software product, and in response 
thereto}generating a first set of parameters from the second computer, and not author- 
izing thk execution of the software product on the second computer. 

\ 

ijTherefore it is respectfully requested that a notice of allowance be issued for the 

present [invention as now claimed. 

j 
-i 

!i 
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please charge any additional fee occasioned by this paper to our Deposit Account 



No. 03-li237. 



Respectfully submitted, 



Edwin H. Paul 
Reg. No. 3 1,405 

CESARI AND MCKENNA, LLP 
88 Black Falcon Avenue 
Boston, MA 02210-2414 
(617)951-2500 



17 



PAGE 18/18* RCVD AT 81612004 11:54:25 AM [Eastern Daylight Time] • SVR:USPT0-EFXRF-1/1 ' DNIS:8729306* CSID: * DURATION (mm-ss):04-38 



